Attach Playbook (example: send email) to Advanced Multistage Attack Detection (Fusion)

%3CLINGO-SUB%20id%3D%22lingo-sub-1958786%22%20slang%3D%22en-US%22%3EAttach%20Playbook%20(example%3A%20send%20email)%20to%20Advanced%20Multistage%20Attack%20Detection%20(Fusion)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1958786%22%20slang%3D%22en-US%22%3E%3CP%3ESince%20we%20can't%20edit%20or%20copy%20the%20default%20%22%3CSPAN%20class%3D%22ext-dataGrid-cell-text%22%3EAdvanced%20Multistage%20Attack%20Detection%22%20Analytics%20rule%2C%20how%20are%20we%20supposed%20to%20attach%20any%20Logic%20App%20to%20it%20firing%20up%3F%20Say%20if%20we%20want%20to%20send%20an%20email%20or%20something.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAndreas%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1967617%22%20slang%3D%22en-US%22%3ERe%3A%20Attach%20Playbook%20(example%3A%20send%20email)%20to%20Advanced%20Multistage%20Attack%20Detection%20(Fusion)%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1967617%22%20slang%3D%22en-US%22%3ESimple%20answer%2C%20but%20you%20don't%20want%20to%20hear%20it%20probably%3A%20currently%20you%20can't%20attach%20a%20Playbook%20to%20a%20fusion%20rule%3C%2FLINGO-BODY%3E
Occasional Contributor

Since we can't edit or copy the default "Advanced Multistage Attack Detection" Analytics rule, how are we supposed to attach any Logic App to it firing up? Say if we want to send an email or something.

 

Andreas

2 Replies
Simple answer, but you don't want to hear it probably: currently you can't attach a Playbook to a fusion rule